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Welcome to OVSC1204 
Business Records (BR) FISA 

In this presentation you will receive information 
from the Office of General Council (OGC) that 
concerns the metadata obtained pursuant to 
the Foreign Intelligence Surveillance Act 
(FISA) Business Records (BR). 

At the conclusion of this course there will be a 
test for BR database access. 
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Legal Precautions 

Examples cited are for training purposes only 

The specific details of each operational 
situation will need to be assessed to ensure 
correct legal guidance can be provided 

Contact Oversight and Compliance (SV) or 
the Office of General Council (OGC) for 
assistance 
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The Office of General 
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Roles and Responsibilities of a BR 

Analyst 



A BR-cleared analyst must be able to: 

> Describe the framework for BR production and analysis 

> Recognize which Foreign Powers are the only authorized targets of this 
data 

> Define the RAS standard 

> State the limitations for querying BR data 

> Apply correct minimization procedures 

> Name points of contact for questions 

UNCLASSIFIED//FOR OFFiCiAL USE ONLY 





BRF Metadata 



>Pursuant to Court authorization, NSA 
is provided telephony metadata 

>NSA is provided the data from US 
service providers? 

>Use of data is for protection of the 
Homeland 



>NSA is authorized to conduct contact 



chaining and 




on the data 
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Verification Requirement 



> Verify that the data is of the type 
authorized by the order, specifically, 
call detail records (telephony metadata) 

> Under NO circumstances may the 
substantive content of communications 
be received under this order 
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Specific Court-Ordered 
Procedures and Restrictions 
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The remainder of the slides in this 
presentation pertain to specific court 
ordered procedures and restrictions 
for this authority 
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Standard for Accessing Data 

Any query of the data archive can occur 
only after a particular known telephone 

identifier has been associated with either: 

> I 



> 

AND 

> The query is based on a Reasonable 
Articulable Suspicion (RAS) 
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Standard for Accessing Data 

Seed queries must be: 

> Specifically known telephone identifiers that 
meet the targeting standard articulated by the 
FISA Court (FISC) 

> Examples of Identifiers 




> Telephone numbers 

'P’l 

>As well as other unique identifiers 
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Standard for Accessing Data 



There must be facts giving rise to a 
reasonable, articulable suspicion (RAS) that 
the original telephone identifier is associated 
with 
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RAS: Formula 



Analysts are NOT free to use a telephone 
selector based on a hunch or guess. 

RAS requires a decision based on 
specific facts that would cause a 
reasonable person to form such an 
opinion. 

The standard requires some minimal level 
of objective justification. 






First Amendment Considerations 



A telephone selector believed to be used 
by a US person shall not be regarded as 
associated with solely on the 

basis of activities protected by the First 
Amendment. 
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Other Access Requirements 



An automatic audit log must be generated 
for each occasion when the information is 
accessed. 

The Log must contain: 

> User Login 

> User IP address 

> Date and time 

> Retrieval request 
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Manner of Accessing Data 



NSA is permitted to perform two types of 
queries: 

1. Contact chaining 
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Minimization Rules 

USSID 18 minimization procedures must be 
applied to the activity 

Prior to disseminating any US person 
identifying information, the Chief of Information 
Sharing Services must determine that it is 
related to counterterrorism and that it is 
necessary to understand or assess the data 
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Questions ? 0ffice of General 

Counsel 

(Operations/Intel Law) 

DL GCOPS 



NSOC has an attorney on call 24/7! 





